Static task
static1
Behavioral task
behavioral1
Sample
c14a350343643752503b25af0b99c8f8_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c14a350343643752503b25af0b99c8f8_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
c14a350343643752503b25af0b99c8f8_virlock_JC.exe
-
Size
200KB
-
MD5
c14a350343643752503b25af0b99c8f8
-
SHA1
2e8c21c329bcaf2746b591259f5f01ae53df464e
-
SHA256
10e36c4aec82565285e1113a879a5d86aeef82a398883d01ccbcb3ffe32d07b5
-
SHA512
91d7e4e47e852a20c659b73cd01a6eeed8eaba27d5bcb61d57e9cdce9cb25b398e121089b60a3e69556028b9dc69ca8e6d7750882e56123d081ace194ef30686
-
SSDEEP
3072:yDpd9PRBQ5dmx3dtO0cPlDJBFvjztOwrLjH72PaiN:yBRBQ5d1rPpTFv1rXjH72Pa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c14a350343643752503b25af0b99c8f8_virlock_JC.exe
Files
-
c14a350343643752503b25af0b99c8f8_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE